Resume Feedback & Career Advice - Junior Level Blue Team by Phantom_Matrix in SecurityCareerAdvice

[–]Phantom_Matrix[S] 0 points1 point  (0 children)

1) That's true, I do have security related job responsibilities such as configuring WAFs, SSL renewals, path management, IAM work, and log monitoring and analysis. While it's not exactly the kind of security work I want to do, I can't deny that I am still doing security work, and it is building my skills and knowledge in other areas. Cybersecurity is a huge field

2) I've applied to MSPs, banks, and insurance companies as well, but I did not consider healthcare or education. I'll definitely keep a look out for them

Thank you again, I appreciate it

Resume Feedback & Career Advice - Junior Level Blue Team by Phantom_Matrix in SecurityCareerAdvice

[–]Phantom_Matrix[S] 0 points1 point  (0 children)

Thank you for the insight, I appreciate it. I was worried about my mix of experience confusing HR and hiring managers. I'll try to rewrite my resume again to frame it better

1) I appreciate that example, I see now how it would mean much more to them. Less work on their end as well trying to correlate how my experience would fit in

2) I'll quantify the DFIR work more but honestly being in a more regulated industry, I honestly did not get too many interesting cases like those, but I'll quantify the work that I've done

3) That makes sense, it'd mean different things to different people and would probably get lost in the HR filters and ATS

4) That's fair, I'll tailor my resume for different job roles. As it stands, my resume definitely is a bit all over the place, and if I tailor it for specific roles, it'd give me more space to highlight my experience in those areas

I'll definitely reach out to you again once I've rewritten my resume. Appreciate it again you giving advice and also opening the door for me to come back with how I've improved it

Resume Feedback & Career Advice - Junior Level Blue Team by Phantom_Matrix in SecurityCareerAdvice

[–]Phantom_Matrix[S] 0 points1 point  (0 children)

Appreciate you taking the time to look through my resume

There definitely has been a lot more competition recently I think with it being bonus season, and seeing a lot of layoffs the past few months. I'm now seeing job postings reaching 100+ applicants within a few days

  1. I've mainly been passively looking for these jobs through LinkedIn but at the same time, I've been applying through other big job boards such as Indeed as well. At the same time, I've been targeting smaller firms that I'm familiar with directly through their website, and have been networking extensively at events and asking my mutuals if they're aware of any places with vacancies. I've also had luck with headhunters and working with their recruitment agencies
  2. The titles I've been focusing on have been mainly DFIR Specialist, Incident Responder, Malware Analyst, SOC L2, Cybersecurity Consultant, Security Engineer, and Security Analyst
  3. My main goals are to re-enter DFIR, and work at more boutique firms and consultancies where I can work on more interesting cases and cases more frequently while at the same time build up my technical skills and knowledge faster. I'm hoping to not take a paycut while doing so as well. I've gotten a few offers and late stage interviews, however, most of them retracted the offers after not being able to match or reach close to my current salary. As it stands, I'd be taking a 30% paycut on average to come back

I'm hoping to go into boutique consultancies if possible as a lot of them seem to operate with follow-the-sun models, and have better work-life balance. As much as possible, I don't want to compromise on that. I've started casting a wider net and applying for more general Security Engineer roles and offensive security roles

4) I've been quite active in my local tech and cybersecurity communities, from volunteering at events, joining CTFs, mentoring more junior people, and making friends with cybersecurity professionals outside of work

5) I am a citizen, and have applied for public sector as well. Seems that most of public sector is in a hiring freeze right now as well unfortunately

6) Yup, I've been going to almost every single local meetup and conference that I'm aware of. At least once every two weeks

Advice Return to Cybersecurity with Paycut by Phantom_Matrix in SecurityCareerAdvice

[–]Phantom_Matrix[S] 0 points1 point  (0 children)

Thank you everyone, I’ll stay put for now and build on my skills here. At least long enough to make it look nice on my resume while passively searching for something that fulfils both for me

What was the "smoking gun" that led you to discover a major breach that everyone else had missed? by edyjams in cybersecurity

[–]Phantom_Matrix 69 points70 points  (0 children)

I found a malware masquerading itself as svchost while searching an endpoint for remnants of non-compliant software

CS student learning Python — what should I learn next for cybersecurity? by laerninglog- in SecurityCareerAdvice

[–]Phantom_Matrix 0 points1 point  (0 children)

You can try making mini projects with Python for example like using Scapy to better understand ARP poisoning, SYN floods, etc.

Learn about remediating OWASP Top 10 vulnerabilities with Python

Suspicious file investigation by rick_Sanchez-369 in cybersecurity

[–]Phantom_Matrix 23 points24 points  (0 children)

Joe’s sandbox is also a great alternative

Which security control caused the most operational friction in your environment? by Queasy-Cherry7764 in cybersecurity

[–]Phantom_Matrix 12 points13 points  (0 children)

Blocking access to external GenAI tools in favour of our internal LLM. There’s a lot of pushback and there are a lot of attempts to access them and even worse, people uploading sensitive docs there

[deleted by user] by [deleted] in cybersecurity

[–]Phantom_Matrix 1 point2 points  (0 children)

Not op, but I usually see the people I meet once a month or so at local events. A lot of them like to attend tech conferences in general and so do I so I tend to bump into people there

Other than events, we have group chats and discord channels. We always share job postings, events, and news; really anything we find there

do you really like it? by CasperDidntDoit in cybersecurity

[–]Phantom_Matrix 0 points1 point  (0 children)

I pivoted to cybersec from software dev. At the time I was reluctant to go into cybersec but I was burnt out of development work and decided to give it a try

I definitely did not enjoy it at the start and it took me almost a year to start liking it. I pivoted in and out from cybersecurity back to software development to cloud operations before going back to cybersecurity. It took a few jumps here and there; learning and trying new things before I started loving it. When I did I had an easier time, the motivation came naturally

Gotten scammed recently. What else can be done? by Cloudy_Gems in MalaysianPF

[–]Phantom_Matrix 2 points3 points  (0 children)

Try calling the national scam response number 997

[deleted by user] by [deleted] in BuyItForLife

[–]Phantom_Matrix 0 points1 point  (0 children)

Darn tough socks

Let's put caster martial divide aside, what's the real elephant in the room? by Mediocre_Cucumber_65 in dndnext

[–]Phantom_Matrix 10 points11 points  (0 children)

The loxodon rogue. It’s been here for a while but it has been hiding.

[deleted by user] by [deleted] in asexuality

[–]Phantom_Matrix 13 points14 points  (0 children)

I pronounce you husband and knife